CVE-2026-111489

UNKNOWN 0.0

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

Vendor	tpc software
Product	matchpoint
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for tpc software matchpoint

Be the first to know when new unknown vulnerabilities affecting tpc software matchpoint are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TPC Software / Matchpoint

Versions prior to latest one

References

NVD ↗ CVE.org ↗ EPSS Data ↗

incibe.es: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tpc-softwares-matchpoint

Credits

Sergi García Tárraga